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In the Claims 

1. (currently amended) A versatile customizable combination system for 
providing filtering of outbound requests for access to web sites on the Internet and/or for 
controlling inbound requests from the Internet for access to a web site of the system, 
comprising: 

a plurality of computer users, 

one or a plurality of user computers, each having a dynamically allocated Internet 
protocol address or a static Internet Protocol address, 

an administrative module/interface that includes configuration settings for 
inbound communications and for outbound communications, has list maintenance 
functions including list editing, lisr deleting, searching of lists, saving of lists, proxy 
chaining routing, adding and deleting users, interchanging lists and importing and 
exporting lists, 

said administrative module located in a user computer for configuring a range of 
access levels and being capable of creating three types of user accounts that have unique * 
uoor nam e s and paGGWordo require unique authentication credentials for each user account 
including an administrator account that is self -configuring and regular accounts with 
varying amounts of administrative privileges, 

a first proxy server in one or a plurality of user computers of a local area network 
with access to the world wide web, each of said first proxy server having a friendly 
outbound list and/or an unfriendly outbound list only one of which is active at any given 
time, and/or having a friendly inbound list anchor an unfriendly inbound list only one of 
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which is active at any given time, the friendly outbound list, the unfriendly outbound list, 
the friendly inbound list and the unfriendly inbound list* being uniquely configurable by 

for each user account. 

said first proxy server programmed to receive a request from an HTTP client, 
check the identity of a requesting client and/orof a requested URL against the friendly 
inbound, friendly outbound, unfriendly inbound or unfriendly outbound list maintained 
by the administrative module and then either approve the request, terminate the request or 
re-route the reques tevithout tho ltnowladgo of th e us b e , 

a second proxy server without the administrative module or the friendly or the 
unfriendly lists placed between the first proxy server and the Internet located at a gnteway 
of tho loocl area network or at on Intomot Sorvico Provider of tho local aroo notworte , the 
second proxy server being capable of communicating to a proxy of a destination or 
directly to a destination, said second proxy server having an Internet Protocol address 
fionf foirahleonlvbv known only to a holder of the administrator account or a regular 
account with administrative privileges, 

the first proxy server and the second proxy server have a network communication 

link between them. 

2. (original) The system of claim 1, wherein the second proxy server is a first 
proxy server but has an empty unfriendly outbound list. 

3. (original) The system of claim 1, wherein a third proxy server and/or additional 
proxy servers forward inbound requests for resources to other proxy servers. 
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4. (previously presented) The system of claim 1 , wherein the system is 
compatible with dialup modem connection to the Internet, a local area network and with 
virtual network connection. 

5. (currently amended) A versatile customizable combination system for 
providing filtering of outbound requests for access to web sites on the Internet and/or for 
controlling inbound requests from the Internet for access to a web site of the system, 

comprising: 

a plurality of computer users, 

one or a plurality of user computers, each having a dynamically allocated Internet 
protocol address or a static Internet Protocol address, 

an administrative module/interface that includes configuration settings for 
inbound communications and for outbound communications, has list maintenance 
functions including list editing, list deleting, searching of lists, saving of lists, proxy 
chaining routing, adding and deleting users, interchanging lists and importing and 
exporting lists, 

said administrative module located in a user computer for configuring a range of 
access levels and being capable of creating three types of user accounts that hawHHWjBe 
^luamooandpftocwordr re quire unique a^ ^atior, credentials for each user account 
including an administrator account that is self-configuring and regular accounts with 
varying amounts of administrative privileges, 

a first proxy server in one or a plurality of user computers of a local area network 
with access to the world wide web, each of said fist proxy server having a friendly 
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outbound list and/or an unfriendly outbound list only one of which is active at any given 
time, and/or having a friendly inbound list and/or an unfriendly inbound Ust only one of 
which is active at any given time, the friendly outbound list, the unfriendly outbound list, 
the friendly inbound list and the unfriendly inbound lists being uniquely configurable for 

by each user account, 

said first proxy server programmed to receive a request from an HTTP client, 
check the identity of a requesting client and/or of a requested URL against the friendly 
inbound, friendly outbound, unfriendly inbound or unfriendly outbound Ust maintained 
by the administrative module and then either approve the request, terminate the request or 
re-route the reques t without tho knowledge of tho uoer , 

a second proxy server without the administrative module and without a the 
friendly or the unfriendly lists placed between the first proxy server and a resource the 
In tomo t lo c ated at n en— 1 '-y nf n thn 1npn1 "™ n "wnvork or at an Intomot Sorvico Provider 
af-Uio local aroa network, the second proxy server being capable of communicating to a 
proxy of a destination or directly to a destination, said second proxy server having an 
Internet Protocol address ^fi ^urable only by known only to a holder of the 
administrator account or a regular account with administrative privileges, 

the fust proxy server and the second proxy server have a communication link 
between them? 

mid wnoroin inbound communication!) are arranged oo that an actual location of an 
important resource io looatod in an unpubliohod location that io a replacement location to 
ivh ic hro q uutc r c j o ot od by thr fi rtt I""""/ ™"'" r ™ rf "' rp l ri wherein approved uooro are 
lijttd in tho fto prmiy n"r"" f ; " * " ntifrinndlw inbound li-t and am sent by tho first pro sy 
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sw yor to tho Toplacomont location, and whoroin unapprovod uoorc aro not list ed-m-the 
unfriendly inbound list ond have r\\ n \ r mgn w ft nnnt tn a pablichod addrooG that contains 
unimportant inforre fi^en. 

6. (original) The system of claim 5, wherein the second proxy server is a first 
proxy server but has an empty unfriendly outbound list. 

7. (currently amended) A versatile customizable combination system for 
providing filtering of outbound requests for access to web sites on the Internet and/or for 
controlling inbound requests from the Internet for access to a web site of the system, 

comprising: 

a plurality of computer users, 

one or a plurality of user computers, each having a dynamically allocated Internet 
protocol address or a static Internet Protocol address, 

an administrative module/interface that includes configuration settings for 
inbound communications and for outbound communications, has list maintenance 
functions including list editing, list deleting, searching of lists, saving of lists, |*exy 
ehaining routing adding and deleting users, interchanging lists and importing and 
exporting lists, 

said administrative module located in a user computer for configuring a range of 
access levels and being capable of creating three types of user accounts that havo uniqu e 
uflor namoo and passwords require unioo s authentication credentials for each user account 
including an administrator account that is self-configuring and regular accounts with 
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varying amounts of administrative privileges, 

a first proxy server in one or a plurality of user computers of a local area network 
with access to the world wide web, each of said first proxy server having a friendly 
outbound list and/or an unfriendly outbound list only one of which is active at any given 
time, and/or having a friendly inbound list and/or an unfriendly inbound list only one of 
which is active at any given time, the friendly outbound list, the unfriendly outbound list, 
the friendly inbound list and the unfriendly inbound lists being uniquely configurable for 

by each user account , 

said first proxy server programmed to receive a request from an HTTP client, 
check the identity of a requesting client and/or of a requested URL against the friendly 
inbound, friendly outbound, unfriendly inbound or unfriendly outbound list maintained 
by the administrative module and then either approve the request, terminate the request or 
re-route the reques t without tho knowledge of th e ufl efi 

and whoroin inbound oomroonioationo oro arranged oo that an actual location of a 
highly conoitivo rooouroo io located in an unpublished location that in a replacement 
location to which roquoota reject e d by tho first proity sorvor oro rerouted, wher e in 
approved uaors are liotod in tho first proxy oorvor in tho unfri e ndly inbound liot and are 
oont by tho proxy corvor to tho roplacomont looation, whoroin unapprovod unoro n r n n n t 
liotod in tho unfriendly inbound iict and have their roquost cent to a publiohod oddroPG that 
contains unimportant information . 

8. (original) The system of claim 7, wherein the range of access levels ranges 
from maximum 100% access to full suspension. 
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9. (currently amended) The system of claim 1, wherein the three types of user 
accounts that have unique ui,ca nnmos and passwords require unique authentication 
credentials for each user account include an administrator account that is self- 
configuring, regular accounts with administraUve privileges other than the privilege to 
create additional accounts or view information on any other accounts and regular 
accounts without administrative privileges and in addition a fourth type of user account 
namely one anonymous guest user account to be used by general users who have no 
system-based user name and password. 

10. (currently amended) The system of claim 5, wherein the three types of user 
accounts that havo uniquo uou uoinoo and passwordo gqiUm unique authentication 
credentials for each user account include an administrator account that is self- 
configuring, regular accounts with administrative privileges other than the privilege to 
create additional accounts or view information on any other accounts and regular 
accounts without administrative privileges and in addition a fourth type of user account 
namely one anonymous guest user account to be used by general users who have no 
system-based user name and password. 

IX. (currently amended) A versatile customizable combination system for 
providing filtering of outbound requests for access to web sites on the Internet and/or for 
controlling inbound requests from the Internet for access to a web site of the system, 
comprising: 
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a plurality of computer users, 

one or a plurality of user computers, each having a dynamically allocated Internet 
protocol address or a static Internet Protocol address, 

an administrative module/interface that includes configuration settings for 
inbound communications and for outbound communications, has list maintenance 
functions including list editing, list deleting, searching of lists, saving of lists, pfexy 
chaining routing, adding and deleting users, interchanging lists and importing and 
' exporting lists, 

said administrative module located in a user computer for configuring a range of 
access levels and being capable of creating three types of user accounts that havo uniqu e 
ULQi nntnnn nnri pmnwnrrlfi r equire unique authentication credentials for each user account 
including an administrator account that is self-configuring and regular accounts with 
varying amounts of administrative privileges, 

a first proxy server in one or a plurality of user computers of a local area network 
with access to the world wide web, each of said fist proxy server having a friendly 
outbound list and/or an unfriendly outbound list only one of which is active at any given 
time, and/or having a friendly inbound list and/or an unfriendly inbound list only one of 
which is active at any given time, the friendly outbound list, the unfriendly outbound list, 
the friendly inbound list and the unfriendly inbound list being uniquely configurable for 
by each user account , and 

said first proxy server programmed to receive a request from an HTTP client, 
check the identity of a requesting client and/or of a requested URL against the friendly 
inbound, friendly outbound, unfriendly inbound or unfriendly outbound list maintained 
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by the administrative module and then either approve the request, terminate the request or 
re-route the reques t wi d mut tho ltnowtodgo of the uoor . 

12. (previously presented) The system of claim 11. wherein the first proxy server 
is in each and every user computer. 

13. (previously presented) The system of claim 12, wherein the range of access 
levels ranges from maximum 100% access to full suspension. 

14. (previously presented) The system of claim 1, wherein the first proxy server is 
in each and every user computer. 

15. (previously presented) The system of claim 14, wherein the range of access 
levels ranges from maximum 100% access to full suspension. 

16. (previously presented) The system of claim 5, wherein the first proxy server is 
in each and every user computer. 

17. (previously presented) The system of claim 16, wherein the range of access 
levels ranges from maximum 100% access to full suspension. 

18. (previously presented) The system of claim 7, wherein the first proxy server is 
in each and every user computer. 
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19. (previously presented) The system of claim 18, wherein the range of access 
levels ranges from maximum 100% access to full suspension. 

20. (previously presented) The system of claim 1, wherein the range of access 
levels ranges from maximum 100% access to full suspension. 

21. (previously presented) The system of claim 5, wherein the range of access 
levels ranges from maximum 100% access to full suspension. 

22. (previously presented) The system of claim 1 1 , wherein the range of access 
levels ranges from maximum 100% access to full suspension. 

23. (previously presented) The system of claim 5, wherein the system is 
compatible with dialup modem connection to the Internet, a local area network and with 
virtual network connection. 

24. (previously presented) The system of claim 23, wherein the range of access 
levels ranges from maximum 100% access to full suspension. 

25. (previously presented) The system of claim 1, wherein the system is 
compatible with dialup modem connection to the Internet, a local area network and with 
virtual network connection. 
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26. (previously presented) The system of claim 25, wherein the range of access 
levels ranges from maximum 100% access to full suspension. 

27. (previously presented) The system of claim 11, wherein the system is 
compatible with dialup modem connection to the Internet, a local area network and with 
virtual network connection. 

28. (previously presented) The system of claim 27, wherein the range of access 
levels ranges from maximum 100% access to full suspension. 

29. (currently amended) The system of claim 7, wherein the three types of user 
accounts that havo uniquo uoor nomoo and poaswords require unique authentication, 
credentials for each user account include an administrator account that is self- 
configuring, regular accounts with administrative privileges other than the privilege to 
create additional accounts or view information on any other accounts and regular 
accounts without administrative privileges and in addition a fourth type of user account 
namely one anonymous guest user account to be used by general users who have no 
system-based user name and password. 

30. (currently amended) The system of claim 11, wherein the three types of user 
accounts that havo uniquo uoor namoc and paccwordo require unique authentication 
credentials for each user account include an administrator account that is self- 
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configuring, regular accounts with administrative privileges other than the privilege to 
create additional accounts or view information on any other accounts and regular 
accounts witfiout administrative privileges and in addition a fourth type of user account 
namely one anonymous guest user account to be used by general users who have no 
system-based user name and password. 

31. (canceled) 

32. (currently amended) The system of claim 21 Z±, wherein the range of access 
levels ranges from maximum 100% access to full suspension. 

33. (currently amended) The system of claim 71 wherein the system is 
compatible with dialup modem connection to the Internet, a local area network and with 
virtual network connection. 

34. (previously presented) The system of claim 33, wherein the range of access 
levels ranges from maximum 100% access to full suspension. 

35. (currently amended) The system of claim 71 wherein the three types of 
user accounts that have unique usornamoo and pocowor ds require unique authentication 
credentials for each user account include an administrator account that is self- 
configuring, regular accounts with administrative privileges other than the privilege to 
create additional accounts or view information on any other accounts and regular 
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accounts without administrative privileges and in addition a fourth type of user account 
namely one anonymous guest user account to be used by general users who have no 
system-based user name and password. 

36. (canceled) 

37. (currently amended) The system of claim 84 36, wherein the range of access 
levels ranges from maximum 100% access to full suspension. 

38. (currently amended) The system of claim 84 3S, wherein the system is 
compatible with dialup modem connection to the Internet, a local area network and with 
virtual network connection. 

39. (previously presented) The system of claim 38, wherein the range of access 
levels ranges from maximum 100% access to full suspension. 

40. (currently amended) The system of claim 84 wherein the three types of 
user accounts that liavo unique uaor namoo and paooworas require unique authentication 
credentials for each user account include an administrator account that is self- 
configuring, regular accounts with administrative privileges other than the privilege to 
create additional accounts ot view information on any other accounts and regular 
accounts without administrative privileges and in addition a fourth type of user account 
namely one anonymous guest user account to be used by general users who have no 
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system-based user name and password. 

41 . (currently amended) A versatile custom&able combination system for 
providing filtering of outbound requests for access to web sites on the Internet, 
comprising: 

a plurality of computer users, 

one or a plurality of user computers, each having a dynamically allocated Internet 
protocol address or a static Internet Protocol address, 

an administrative module/interface that includes configuration settings for 
outbound communications, has list maintenance functions including list editing, list 
deleting, searching of lists, saving of lists, proxy chaining routing, adding and deleting 
users, interchanging lists and importing and exporting lists, 

said administrative module located in a user computer for configuring a range of 
access levels and being capable of creating three types of user accounts that hav e uniqu e 
nmr t^tt^o nn HI prmunrrk require unique authentication credentials for each user account 
including an administrator account that is self-configuring^and regular accounts with 
varying amounts of administrative privileges, 

a first proxy server in one or a plurality of user computers of a local area network 
with access to the world wide web, each of said first proxy server having a friendly 
outbound list and/or an unfriendly outbound list only one of which is active at any given 
time, the friendly outbound list and the unfriendly outbound list being uniquely 
configurable for by each user account 

said first proxy server programmed to receive a request from an HTTP client, 
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check the identity of a requested URL against the friendly outbound list or unfriendly 
outbound list maintained by the administrative module and then either approve the 
request, terminate the request or re-route the request yuUumi IhuluKin Ln^ nfthn n-nr. 

a second proxy server without the adrrunistrative module or the friendly or the 
unfriendly list, placed between the first proxy server and the Internet to oau. d at a g at ^ ny 
e£ tho loool aroa n e twork or at an Intom &t Scrvioo Frovidor of tho local tuaa network, 
second proxy server being capable of communicating to a proxy of a destination or 
directly to a destination, said second proxy server having an Internet Protocol address 
.o^rahleonlvbv te*wr^e«ly4e a holder of the administrator account or a regular 
account with administrative privileges, 

the first proxy server and the second proxy server have a network communication 

link between them. 

42. (currently amended) The system of claim 41 , wherein the three types of user 
account that luu u unique , n rn rn n mno andpn^w nr d* r qnin> nniq u^mhentication 
credentials for each user account include an administrator account that is self- 
configuring, regular accounts with administrative privileges other than the privilege to 
create additional accounts or view information on any other accounts and regular 
accounts without administrative privileges and in addition a fourth type of user account 
namely one anonymous guest user account to be used by general users who have no 
system-based user name and password. 

43. (previously presented) The system of claim 41, wherein the range of access 
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levels ranges from maximum 100% access to full suspension. 

44. (previously presented) The system of claim 41 wherein the system is 
compatible with dialup modem connection to the Internet, a local area network and with 
virtual network connection. 

45. (previously presented) The system of claim 44, wherein the range of access 
levels ranges from maximum 100% access to full suspension. 

46. (currently amended) A versatile customizable combination system for 
providing filtering of outbound requests for access to web sites on the Internet, 

comprising: 

a plurality of computer users, 

one or a plurality of user computers, each having a dynamically allocated Internet 
protocol address or a static Internet Protocol address, 

an administrative module/interface that includes configuration settings for 
outbound communications, has list maintenance functions including list editing, list 
deleting, searching of lists, saving of lists , proxy chaining routing , adding and deleting 
users, interchanging lists and importing and exporting lists, 

said administrative module located in a user computer for configuring a range of 
access levels and being capable of creating three types of user accounts that hovo unique 
asor namoG and passwords squire unique authentication credentials for each user account 
including an administrator account that is self-configuring and regular accounts with 
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varying amounts of administrative privileges, 

a first proxy server in one or a plurality of user computers of a local area network 
with access to the world wide web. each of said fist proxy server having a friendly 
outbound list and/or an unfriendly outbound list only one of which is active at any given 
time, the friendly outbound list and the unfriendly outbound list being uniquely 
configurable for. fey each user accounj, and 

said first proxy server programmed to receive a request from an HTTP client, 
check the identity of a requested URL against the friendly outbound or unfriendly 
outbound list maintained by the administrative module and then either approve the 
request, terminate the request or re-route the request without the knowledge of the user. 

47. (currently amended) The system of claim 46, wherein the three types of user 
accounts that have unique us e r uuuicfi and ponoworn r require ^ unique authentication , 
credentials for each user account include an administrator account that is self- 
configuring, regular accounts with administrative privileges other than the privilege to 
create additional accounts or view information on any other accounts and regular 
accounts without adrninistrative privileges and in addition a fourth type of user account 
namely one anonymous guest user account to be used by general users who have no 
system-based user name and password. 

48. {previously presented) The system of claim 46, wherein the range of access 
levels ranges from maximum 100% access to full suspension. 
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49. (previously presented) The system of claim 46 wherein the system is 
compatible with dialup modem connection to the Internet, a local area network and with 
virtual network connection. 

50. (previously presented) The system of claim 49, wherein the range of access 
levels ranges from maximum 100% access to full suspension. 

51 . (previously presented) The system of claim 1, wherein said first proxy server 
is also programmed to register the request in a logfile of all web sites requested by a user. 

52. (previously presented) The system of claim 5, wherein said first proxy server 
is also programmed to register the request in a logfile of all web sites requested by a user. 

53. (previously presented) The system of claim 7, wherein said first proxy server 
is also programmed to register the request in a logfile of all web sites requested by a user. 

54. (previously presented) The system of claim 11, wherein said first proxy server 
is also programmed to register the request in a logfile of all web sites requested by a user. 

55. (currently amended) The system of claim 61 34-, wherein said first proxy 
server is also programmed to register the request in a logfile of all web sites requested by 
a user. 
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56. (currently amended) The system of claim 21 36, wherein said first proxy 
server is also programmed to register the request in a logfile of all web sites requested by 
a user. 

57. (previously presented) The system of claim 41, wherein said first proxy server 
is also programmed to register the request in a logfile of all web sites requested by a user. 

58. (previously presented) The system of claim 46, wherein said first proxy server 
is also programmed to register the request in a logfile of all web sites requested by a user. 

59. (new) The system of claim 1, wherein the first proxy server is programmed to 
check the identity of a user who logs into the first proxy server and who presents a unique 
authentication credential prior to checking the identity of the requesting client and/or 
requested URL against the list or lists. 

60. (new) The system of claim 59, wherein the first proxy server is programmed, 
upon a successful authentication of the user" s credential, to use a configuration of the 
user's account to check the identity of the requesting client and/or requested URL against 
the list or lists. 

61. (new) The system of claim 59, wherein the first proxy server is programmed 
that if said first proxy server fails to authenticate the user, then the first proxy server 
offers that user an opportunity to log in as an anonymous guest user. 
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62. (new) The system of claim 1, wherein a third proxy server and/or additional 
proxy servers forward the outbound requests for access to web sites to other proxy 
servers. 

63. (new) The system of claim 5, wherein inbound communications are arranged 
so that an actual location of an important resource is located in an unpublished location 
that is a replacement location to which requests rejected by the first proxy server are 
rerouted, wherein approved clients are listed in the first proxy server in the unfriendly 
inbound list and are sent by the first proxy server to the replacement location, and 
wherein unapproved clients are not listed in the unfriendly inbound list and have their 
request sent to a published address that contains unimportant information 

64. (new) The system of claim 63, wherein a third proxy server and/or additional 
proxy servers forward inbound requests for resources to other proxy servers. 

65. (new) The system of claim 63, wherein a third proxy server and/or additional 
proxy servers forward the outbound requests for access to web sites to other proxy 
servers. 

66. (new) The system of claim 5, wherein a third proxy server and/or additional 
proxy servers forward inbound requests for resources to other proxy servers. 

67. (new) The system of claim 5, wherein a third proxy server and/or additional 
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proxy servers forward the outbound requests for access to web sites to other proxy 
servers. 

68. (new) The system of claim 63, wherein the first proxy server is programmed 
to check the identity of a user who logs into the first proxy server and who presents a 
unique authentication credential against a valid user account prior to checking the identity 
of the requesting client and/or requested URL against the list or lists. 

69. (new) The system of claim 68, wherein the first proxy server is programmed, 
upon a successful authentication of the user's credential, to use a configuration of the 
user's account to check the identity of the requesting client and/or requested URL against 
the list or lists. 

70. (new) The system of claim 68. wherein the first proxy server is programmed 
that if said first proxy server fails to authenticate the user, then the first proxy server 
offers that user an opportunity to log in as an anonymous guest user. 

71. (new) The system of claim 5, wherein inbound communications are arranged 
so that an actual location of an important resource is located in an unpublished location 
that is a replacement location to which requests rejected by the first proxy server are 
rerouted, wherein approved clients are not listed in the first proxy server in the friendly 
inbound list and are sent by the first proxy server to the replacement location, and 
wherein unapproved clients are listed in the friendly inbound list and have their request 
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• sent to a published address that contains unimportant information. 

72. (new) The system of claim 71, wherein a third proxy server and/or additional 
proxy servers forward inbound requests for resources to other proxy servers. 

73. (new) The system of claim 71, wherein a third proxy server and/or additional 
proxy servers forward the outbound requests for access to web sites to other proxy 
servers. 

74. (new) The system of claim 71, wherein the first proxy server is programmed 
to check the identity of a user who logs into the first proxy server and who presents a 
unique authentication credential against a valid user account prior to checking the identity 
of the requesting client and/or requested URL against the list or lists. 

75. (new) The system of claim 74, wherein the first proxy serveT is programmed, 
upon a successful authentication of the user's credential, to use a configuration of the 
user's account to check the identity of the requesting client and/or requested URL against 
the' list or lists. 

76. (new) The system of claim 74, wherein the first proxy server is programmed 
that if said first proxy server fails to authenticate the user, then the first proxy server 
offers that user an opportunity to log in as an anonymous guest user. 
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77. (new) The system of claim 5, wherein the first proxy server is programmed to 
check the identity of a user who logs into the first proxy server and who presents a unique 
authentication credential against a valid user account prior to checking the identity of the 
requesting client and/or requested URL against the list or lists. 

78. (new) The system of claim 77, wherein the first proxy server is programmed, 
upon a successful authentication of the user's credential, to use a configuration of the 
user* s account to check the identity of the requesting client and/or requested URL against 
the list or lists. 

79. (new) The system of claim 77, wherein the first proxy server is programmed 
that if said first proxy server fails to authenticate the user, then the first proxy server 
offers that user an opportunity to log in as an anonymous guest user. 

80. (new) The system of claim 7> wherein inbound communications are arranged 
so that an actual location of an important resource is located in an unpublished location 
that is a replacement location to which requests rejected by the first proxy server are 
rerouted, wherein approved clients are listed in the first proxy server in the unfriendly 
inbound list and are sent by the first proxy server to the replacement location, and 
wherein unapproved clients are not listed in the unfriendly inbound list and have their 
request sent to a published address that contains unimportant information 

81. (new) The system of claim 80> wherein the first proxy server is programmed 
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to check the identity of a user who logs into the first proxy server and who presents a 
unique authentication credential against a valid user account prior to checking the identity 
of the requesting client and/or requested URL against the list or lists. 

82. (new) The system of claim 81, wherein the first proxy server is programmed, 
upon a successful authentication of the user's credential* to use a configuration of the 
user's account to check the identity of the requesting client and/or requested URL against 
the list or lists. 

83. (new) The system of claim 81, wherein the first proxy server is programmed 
that if said first proxy server fails to authenticate the user, then the first proxy server 
offers that user an opportunity to log in as an anonymous guest user. 

84. (new) The system of claim 7, wherein inbound communications are arranged 
so that an actual location of an important resource is located in an unpublished location 
that is a replacement location to which requests rejected by the first proxy server are 
rerouted, wherein approved clients are not listed in the first proxy server in the friendly 
inbound list and are sent by the first proxy server to the replacement location, and 
wherein unapproved clients are listed in the friendly inbound list and have their request 
sent to a published address that contains unimportant information. 

85. (new) The system of claim 84, wherein the first proxy server is programmed 
to check the identity of a user who logs into the first proxy server and who presents a 
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unique authentication credential against a valid user account prior to checking the identity 
of the requesting client and/or requested URL against the list or lists. 

86. (new) The system of claim 85, wherein the first proxy server is programmed, 
upon a successful authentication of the user's credential, to use a configuration of the 
user' s account to check the identity of the requesting client and/or requested URL against 
the list or lists. 

87. (new) The system of claim 85, wherein the first proxy server is programmed 
that if said first proxy server fails to authenticate the user, then the first proxy server 
offers that user an opportunity to log in as an anonymous guest user. 

88. (new) The system of claim 7, wherein the first proxy server is programmed to 
check the identity of a user who logs into the first proxy server and who presents a unique 
authentication credential against a valid user account prior to checking the identity of the 
requesting client and/or requested URL against the list or lists. 

89. (new) The system of claim 88, wherein the first proxy server is programmed, 
upon a successful authentication of the user's credential, to use a configuration of the 
user' s account to check the identity of the requesting client and/or requested URL against 
the list or lists. 

90. (new) The system of claim 88, wherein the first proxy server is programmed 
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that if said first proxy server fails to authenticate the user, then the first proxy server 
offers that user an opportunity to log in as an anonymous guest user. 

91. (new) The system of claim U, wherein the first proxy server is programmed 
to check the identity of a user who logs into the first proxy server and who presents a 
unique authentication credential against a valid user account prior to checking the identity 
of the requesting client and/or requested URL against the list or lists. 

92. (new) The system of claim 91, wherein the first proxy server is programmed, 
upon a successful authentication of the user' s credential, to use a configuration of the 
user's account to check the identity of the requesting client and/or requested URL against 
the list or lists. 

93. (new) The system of claim 91, wherein the first proxy server is programmed 
that if said first proxy server fails to authenticate the user, then the first proxy server 
offers that user an opportunity to log in as an anonymous guest user. 

94. (new) The system of claim 41, wherein the first proxy server is programmed 
to check the identity of a user who logs into the first proxy server and who presents a 
unique authentication credential against a valid user account prior to checking the identity 
of the requesting client and/or requested URL against the list or lists. 

95. (new) The system of claim 94, wherein the first proxy server is programmed. 
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upon a successful authentication of the user's credential, to use a configuration of the 
user's account to check the identity of the requesting client and/or requested URL against 
the list or lists. 

96. (new) The system of claim 94, wherein the first proxy server is programmed 
that if said first proxy server fails to authenticate the user, then the first proxy server 
offers that user an opportunity to log in as an anonymous guest user. 

97. (new) The system of claim 41, wherein a third proxy server and/or additional 
proxy servers forward inbound requests for resources to other proxy servers. 

98. (new) The system of claim 41, wherein a third proxy server and/or additional 
proxy servers forward the outbound requests for access to web sites to other proxy 
servers. 

99. (new) The system of claim 46, wherein the first proxy server is programmed 
to check the identity of a user who logs into the first proxy server and who presents a 
unique authentication credential against a valid user account prior to checking the identity 
of the requesting client and/or requested URL against the list or lists. 

100 (new) The system of claim 99, wherein the first proxy server is programmed, 
upon a successful authentication of the user's credential, to use a configuration of the 
user's account to check the identity of the requesting client and/or requested URL against 



-28- 
PAGE 30/33 1 RCVD AT 7/1 1/2055 5:02:45 PM [Eastern Daylight Tune] 1 SVR:USPTO-EFXRF-1IO • DNiS:8729306 ' CSID:212 685 6862 * DURATION (mrn-ss):0M2 



FILE No. 726 07/11 '05 15=54 ID:NEWMAN & BERGER 



FAX:212 685 6862 



PAGE 31/ 33 



the list or lists. 

101. (new) The system of claim 99, wherein the first proxy server is programmed 
that if said first proxy server fails to authenticate the user, then the first proxy server 
offers that user an opportunity to log in as an anonymous guest user. 

102. (new) The system of claim 80, wherein said first proxy server is also 
programmed to register the request in a logfile of all web sites requested by a user. 
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